Unauthenticated Remote Code Execution in SGLang via Malicious Pickle File

Executive Summary

SGLang has a feature called expert-parallel backup that uses a ZeroMQ PULL socket on a network interface without authentication or input validation. An attacker can send a malicious pickle file to this socket, which executes arbitrary code remotely when the feature is enabled and the service is accessible over the network.

Useful 0 Not Useful 0

Detection Guidance

Check for open ZeroMQ PULL sockets on routable network interfaces using tools like netstat or ss. Look for processes running expert_backup_manager.py or related SGLang services. Monitor network traffic for unauthenticated connections to ports associated with ZeroMQ communication.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthenticated remote attackers to execute arbitrary code on systems running SGLang with the vulnerable expert-parallel backup feature enabled. This could lead to full system compromise, data theft, or disruption of services.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules for protected health information. Organizations may face fines, legal penalties, and reputational damage if exploited.

Useful 0 Not Useful 0

Mitigation Strategies

Disable the expert-parallel backup subsystem if not in use. Restrict network access to ZeroMQ ports using firewalls. Ensure all ZeroMQ sockets require authentication and validate deserialization inputs. Update SGLang to the latest patched version if available.

Useful 0 Not Useful 0